Senior Cybersecurity Engineer

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

The role is part of the In-Space Systems business unit, which is focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit.

Blue National Security (BNS) builds and operates space systems for the Intelligence Community and Department of Defense. The classified enclaves, mission ground systems, and labs behind those missions have to be secure, accredited, and available every time.

We're looking for a Senior Cybersecurity Engineer to do that work hands-on. You'll engineer and harden the systems our programs depend on, drive them through accreditation, and stand watch over them once they're operational.

This is a builder's role on a team that is still writing its own playbooks. You'll have real ownership over specific systems and enclaves, and direct influence over the standards the rest of the team adopts.

What You'll Do Engineer and harden. Implement security architecture across classified enclaves, mission ground systems, and lab environments — network segmentation, identity and access management, endpoint hardening, logging and audit, and encryption at rest and in transit.

Drive accreditation. Author and maintain SSPs, security control implementation statements, risk assessments, and POA&Ms. Take systems through RMF to ATO and ATC, then keep them compliant through continuous monitoring.

Defend the environment. Perform vulnerability scanning and remediation, patch management, log review and audit reduction, and triage of security events alongside the enterprise SOC.Respond to incidents. Participate in the on-call rotation. Investigate, contain, and document incidents, and drive corrective actions to closure with system owners.

Automate the toil. Build the scripting and tooling that make compliance evidence, STIG application, and reporting repeatable rather than manual.

Support the mission directly. Work shoulder-to-shoulder with program engineers and system administrators to deliver secure systems on mission schedule — finding the compliant path to yes .Raise the bar. Mentor junior engineers and analysts, and contribute to team standards, baselines, and accreditation playbooks.

Minimum Qualifications Bachelor's degree in a technical discipline (Computer Science, Cybersecurity, Computer/Electrical Engineering, or similar), or equivalent experience6+ years of hands-on cybersecurity engineering experience

Direct experience implementing and sustaining security controls on classified systems in DoD or IC environments

Working experience with RMF control implementation, SSP and artifact development, POA&M remediation, and continuous monitoring

Hands-on depth in at least three of:
Linux and Windows hardening (STIG/SCAP), network security and segmentation, IAM and PKI, government cloud (AWS Gov Cloud / Azure Government), SIEM and log analysis, vulnerability management tooling Scripting proficiency (Python, Power Shell, Bash) for automation of security operations and compliance tasks

Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination

DoD 8140 IAT/IAM Level II certification (Security+ CE or equivalent) at hire

Preferred Qualifications Prior ISSO or ISSE role on SAP/SAR programs

Working knowledge of JSIG, ICD 503/705, and NIST SP 800-53 / 800-171

Experien…